CVE-2026-45820

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...

EUVD-2026-47616

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...

EUVD-2026-46535

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-46504

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. The supported version that is affected is 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-16517

A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryption is enabled and the entry file size is close to INT64MAX, the addition of the encryption overhead to the entry size overflows int64...

CVE-2026-47026

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-60800

CVE-2026-60800 affects Oracle E-Business Suite Oracle Compensation Workbench (component: Compensation Workbench), with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged, network-attached attacker and can lead to unauthorized data access and possible ...

CVE-2026-47695 CC-Tweaked has an SSRF Protection Bypass with NAT64

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to version 1.119.0, CC-Tweaked's HTTP API http.request, http.websocket blocks requests to private network ranges to prevent server-side request forgery SSRF. This protection can be bypassed ...

CVE-2026-47695

CC-Tweaked has an SSRF protection bypass via NAT64. Before version 1.119.0, the HTTP API endpoints (http.request, http.websocket) could be tricked into reaching internal IPv4 services by supplying a NAT64 address in the URL (example: http://[64:ff9b::]/). The NAT64 prefix 64:ff9b::/96 is not reco...

CVE-2026-63875

A flaw was found in the Linux kernel, specifically within the arm64 architecture's Translation Lookaside Buffer TLB management. When a Page Middle Directory PMD table was unshared, the TLB flush operation did not correctly invalidate entries in the walk cache. This oversight could leave stale PMD...

CVE-2026-63856

A flaw was found in the Linux kernel's AMDGPU Video Core Next VCN 2.0 component. This vulnerability arises because the VCN encoder and decoder rings do not properly support 64-bit user fence writes. An attacker could exploit this by submitting command sequences with 64-bit user fences, leading to...

CVE-2026-16441 Eclipse OpenJ9 : Method resolution default method precedence failure

In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method...

EUVD-2026-46338

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow...

CVE-2026-63848

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This vulnerability occurs because the JPEG rings do not support 64-bit user fence writes. An attacker could exploit this by submitting commands with 64-bit user fences, leading to the rejection of command submissions and potentially a...

PT-2026-63256

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A signed integer overflow occurs in the ZIP writer. Within the archive write zip header function in archive write set format zip.c, when ZIP encryption is active and the entry file size is...

PT-2026-62027

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions prior to 0.61 Description An issue occurs when executing class files where a superclass method, which was previously concrete, has been recompiled as abstract. In this scenario, the execution is incorrectly delegated to...

PT-2026-62180

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools version 8.62 Description A flaw in the PIA Core Technology component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human...

CVE-2026-63850

A flaw was found in the Linux kernel's AMDGPU Video Core Next VCN component. The VCN encoder and decoder rings, specifically version 5.0.0, do not correctly support 64-bit user fence writes. This can lead to a denial of service, as the kernel will reject command submissions that attempt to use...

CVE-2026-63841

A flaw was found in the Linux kernel's amdgpu graphics driver, specifically within the JPEG component. This vulnerability occurs because the JPEG rings do not correctly support 64-bit user fence writes. A local attacker could exploit this by submitting command requests with 64-bit user fences,...

USN-8566-1 linux, linux-gcp, linux-gke, linux-realtime vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...